Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
File: Kksu12XR1HipbYLxJgEen7dS_Ic.mft (raw, json)
Hash identifier: V5qS1zDANwLwaTpcwKhNKVlXYQo8uIBoKAvUBgrDf1s=
Subject key identifier: 94:B1:B6:7A:22:DC:2E:A4:70:DC:E8:0F:BE:D9:22:99:3E:CD:59:25
Authority key identifier: 2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
Certificate issuer: /CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Certificate serial: 01965613642322409E6678318806905ED487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
Manifest number: 14FA
Signing time: Mon 21 Apr 2025 02:00:33 +0000
Manifest this update: Mon 21 Apr 2025 02:00:33 +0000
Manifest next update: Tue 22 Apr 2025 02:00:33 +0000
Files and hashes: 1: Kksu12XR1HipbYLxJgEen7dS_Ic.crl (hash: SKF7QqFIizkYDfBwbZ47OT/nCW5I4aoFFpk/9SGQA9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:64:23:22:40:9e:66:78:31:88:06:90:5e:d4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4b2ed765d1d478a96d82f126011e9fb752fc87
Validity
Not Before: Apr 21 02:00:33 2025 GMT
Not After : Apr 22 02:00:33 2025 GMT
Subject: CN=94b1b67a22dc2ea470dce80fbed922993ecd5925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:fd:81:8a:76:61:56:c8:cc:ee:1d:b6:a9:
5a:11:27:9d:82:f0:e6:3c:3f:db:a5:59:e7:ef:0c:
ce:1a:3d:22:f7:7f:53:3c:65:e0:b0:b1:81:67:1b:
a9:a6:e8:7c:34:16:a7:f2:a6:7a:a1:67:3c:df:93:
db:bc:b6:ec:39:3c:62:49:fb:52:a3:c4:7b:5a:a6:
ee:3f:2c:13:e3:e5:8b:ea:57:41:26:86:cd:ae:23:
d6:99:45:75:07:0e:04:02:34:dc:f4:c3:0a:4c:a3:
6f:04:5d:34:b4:f7:ae:fe:54:9b:bd:c7:04:bf:ba:
16:b8:57:aa:5a:b2:ae:58:cd:18:82:0f:96:a9:ed:
16:77:24:60:f6:88:cc:74:10:09:a8:d6:4b:92:ed:
68:a9:38:b6:27:b2:7b:b8:a7:7c:33:a5:4e:20:ed:
00:de:e6:b2:8b:55:73:af:ad:b1:7d:f5:d8:7b:6f:
84:80:2a:8d:2b:8c:a5:45:4b:77:73:4b:25:fd:67:
b6:1a:8a:fb:92:69:88:e6:4b:0f:cf:64:3c:6f:8c:
18:ed:4a:4a:48:6c:48:1d:70:47:bc:51:3f:45:d2:
95:e3:e3:ef:09:32:21:dd:b7:bb:d5:b7:f7:05:ef:
88:93:e8:6c:d4:bf:2a:2c:74:79:6b:7f:26:55:81:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B1:B6:7A:22:DC:2E:A4:70:DC:E8:0F:BE:D9:22:99:3E:CD:59:25
X509v3 Authority Key Identifier:
keyid:2A:4B:2E:D7:65:D1:D4:78:A9:6D:82:F1:26:01:1E:9F:B7:52:FC:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kksu12XR1HipbYLxJgEen7dS_Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/49e0b2-1e2a-432a-ba19-115988d81289/1/Kksu12XR1HipbYLxJgEen7dS_Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d1:14:54:97:fd:9e:a9:ba:a8:41:b7:dd:10:6f:ef:44:21:
ec:38:65:16:53:b6:8d:d8:ff:de:89:e1:dd:0f:52:c5:73:23:
74:f3:cf:a2:21:95:cc:12:58:33:ab:2c:0f:f7:5d:33:04:c8:
62:55:25:84:d1:da:57:37:8a:30:c3:99:02:be:e4:f4:3a:f0:
26:52:85:29:6d:43:2d:69:95:c6:70:13:5d:0d:2f:5a:e9:28:
34:98:f4:bf:c4:fa:0a:55:62:2b:74:41:1a:6a:02:b6:6d:7e:
8d:bb:fa:18:87:aa:f5:3a:32:bb:66:7c:59:60:da:e7:f3:cd:
d3:c2:5f:bb:6f:cd:a9:ec:36:f2:0c:b9:9f:9a:16:94:f6:63:
90:71:f7:ec:f0:4a:b4:a1:f7:5b:6b:ad:29:09:1e:f8:50:04:
d8:5f:3d:11:a5:e3:c1:b7:ba:7a:5a:a6:2a:e1:ea:4e:ae:ff:
cb:b8:40:f9:11:38:34:12:a8:d4:08:e6:4f:2e:5f:16:24:be:
13:1e:9c:5c:05:c6:8e:94:82:a4:28:17:f1:49:7a:14:20:e4:
76:2a:6f:e7:88:91:28:cd:ec:8d:d9:fa:5a:07:e6:b8:82:6f:
96:47:a4:02:40:fa:a5:70:36:a1:cc:7c:64:aa:cf:5b:63:86:
b9:53:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:00:50 2025 by rpki-client